searchAlerts
Query Wazuh security logs stored in OpenSearch to detect and analyze alerts within specified time ranges, retrieve relevant results, and monitor security events effectively.
Instructions
Search for security alerts in Wazuh data
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| index | No | Index pattern to search | wazuh-alerts-* |
| maxResults | No | Maximum number of results to return | |
| query | Yes | The search query text | |
| timeRange | No | Time range (e.g., 1h, 24h, 7d) | 24h |